IN THE CLAIMS 

The following is a complete listing of the claims, and replaces all earlier versions and 
listings. 

1. (Currently Amended) A computer system comprising: a network (100); a server 
computer (110, 120) connected to the network; a plurality of client computers (11, 12, 21) 
connectable to the network; and portable information recording media (Rll, R12, R21) 
issued respectively to individual users for use upon connection to the client computers; 
wherein 

a unique identification code (ID(ll), ID(12), ID(21)) is recorded in each of the client 
computers (11, 12, 21) so as to enable distinction from other client computers, said 
identification code being not necessary to be sent to the server computer in order to establish 
a session, 

an identification code (ID(ll), ID(12), ID(21)) that corresponds to a specific identification 
code recorded in a specific client computer is recorded in each of the portable information 
recording media (Rll, R12, R21) issued to the individual users , and 

each of the client computers (11, 12, 21) comprises an interface means (11D) for 
connecting a portable information recording medium (Rll, R12, R21), an identification code 
comparing means (11C) that compares an identification code recorded in a currently 
connected portable information recording medium (Rll) and an identification code recorded 
in itself the client computers, an access right setting means (11B) that sets a predetermined 
access right based on a comparison result obtained by said identification code comparing 
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means , and a server access means (11 A) that performs access to the server computer within a 
range of the access right that has been set by said access right setting means . 

2. (Currently Amended) A computer system comprising: a network (100); a server 
computer (110, 120) connected to the network; a plurality of client computers (11, 12, 21) 
connectable to the network; and portable information processing devices (Pll) issued 
respectively to individual users for use upon connection to the client computers; wherein 
a unique identification code (ID(ll), ID(12), ID(21)) is recorded in each of the client 
computers (11, 12, 21) so as to enable distinction from other client computers, said 
identification code being not necessary to be sent to the server computer in order to establish 
a session, 

an identification code (ID(ll)) that corresponds to a specific identification code recorded 
in a specific client computer is recorded in each of the portable information processing 
devices (Pll) issued to the individual users , 

each of the client computers (11, 12, 21) comprises an interface means (11D) for 
connecting a portable information processing device (Pll), and a server access means (11 A) 
that performs access to the server computer (110, 120) within a range of an access right that is 
set and transmitted from a currently connected portable information processing device (Pll), 
and 

each of the portable information processing devices (Pll) comprises an identification 
code comparing means (HE) that compares an identification code (ID(ll)) recorded in a 
currently connected client computer (11) and an identification code (ID(ll)) recorded in itself 
the portable information processing devices , an access right setting means (11F) that sets a 
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predetermined access right based on a comparison result obtained by said identification code 
comparing means , and an access right transmitting means (11G) that transmits, to the 
currently connected client computer (11), the access right that has been set by said access 
right setting means . 

3. (Previously Presented) The computer system according to Claim 1, wherein 

the access right setting means (11B, 11F) sets a first access right when the comparison 
result indicates matching and sets a second access right, with more restrictions than the first 
access right, when the comparison result indicates mismatching. 

4. (Previously Presented) The computer system according to Claim 1, wherein 

a MAC address provided to a LAN communication circuit incorporated in a client 
computer (11, 12, 21), unique data stored in a storage device of the client computer (11, 12, 
21), or information indicating an arrangement of application programs stored in a storage 
device of the client computer (11, 12, 21) is used as a unique identification code for 
identifying the client computer (11, 12, 21). 

5. (Currently Amended) A computer system comprising: a network (100); a server 
computer (110, 120) connected to the network; a plurality of client computers (11, 12, 21) 
connectable to the network; and portable information recording media (Rll, R12, R21) 
issued respectively to individual users for use upon connection to the client computers; 
wherein 

environment information (ENV(ll), ENV(12), ENV(21)) that indicates a specific 
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network environment that is obtained when a client computer (11, 12, 21) is connected to a 
specific location of the network (100) is recorded in each of the portable information 
recording media (Rll, R12, R21) issued to the individual users , and 

each of the client computers (11, 12, 21) comprises an interface means (11D) for 
connecting a portable information recording medium (Rll, R12, R21), an environment 
comparing means (11H) that compares a network environment indicated by environment 
information (ENV(ll)) recorded in a currently connected portable information recording 
medium (Rll) and a current network environment of itself the client computers , an access 
right setting means (11B) that sets a predetermined access right based on a comparison result 
obtained by said environment comparing means , and a server access means (11 A) that 
performs access to the server computer within a range of the access right that has been set by 
said access right setting means . 

6. (Currently Amended) A computer system comprising: a network (100); a server 
computer (110, 120) connected to the network; a plurality of client computers (11, 12, 21) 
connectable to the network; and portable information processing devices (Pll) issued 
respectively to individual users for use upon connection to the client computers; wherein 

environment information that indicates a specific network environment that is obtained 
when a client computer (11, 12, 21) is connected to a specific location of the network (100) is 
recorded in each of the portable information processing devices (Pll) issued to the individual 
users , 

each of the client computers (11, 12, 21) comprises an interface means (11D) for 
connecting a portable information processing device (Pll), and a server access means (11 A) 
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that performs access to the server computer (110, 120) within a range of an access right that is 
set and transmitted from a currently connected portable information processing device (Pll), 
and 

each of the portable information processing devices (Pll) comprises an environment 
comparing means (111) that compares a network environment of a currently connected client 
computer and a network environment indicated by environment information (ENV(1 1)) 
recorded in itself the portable information processing devices , an access right setting means 
(1 IF) that sets a predetermined access right based on a comparison result obtained by said 
environment comparing means , and an access right transmitting means (11G) that transmits, 
to the currently connected client computer (11), the access right that has been set by said 
access right setting means . 

7. (Previously Presented) The computer system according to Claim 5, wherein 

the access right setting means (11B, 11F) sets a first access right when the comparison 
result indicates matching and sets a second access right, with more restrictions than the first 
access right, when the comparison result indicates mismatching. 

8. (Previously Presented) The computer system according to Claim 5, wherein 

an IP address provided to a client computer (11, 12, 21), a default gateway address set for 
the client computer (11, 12, 21), a proxy server address set for the client computer (11, 12, 
21), or a domain name which can be referred by a DNS server used by the client computer 
(11, 12, 21) is used as environment information that indicates a network environment of the 
client computer (11, 12, 21). 
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9. (Currently Amended) A computer system comprising: a network (100); a server 
computer (110, 120) connected to the network; a plurality of client computers (11, 12, 21) 
connectable to the network; and portable information recording media (Rll, R12, R21) 
issued respectively to individual users for use upon connection to the client computers; 
wherein 

a unique identification code (ID(ll), ID(12), ID(21)) is recorded in each of the client 
computers (11, 12, 21) so as to enable distinction from other client computers, said 
identification code being not necessary to be sent to the server computer in order to establish 
a session, 

an identification code (ID(ll), ID(12), ID(21)) that corresponds to a specific identification 
code recorded in a specific client computer and environment information (ENV(ll), 
ENV(12), ENV(21)) that indicates a specific network environment that is obtained when a 
client computer (11, 12, 21) is connected to a specific location of the network (100) are 
recorded in each of the portable information recording media (Rll, R12, R21) issued to the 
individual users , and 

each of the client computers (11, 12, 21) comprises an interface means (11D) for 
connecting a portable information recording medium (Rll, R12, R21), an identification code 
comparing means (11C) that compares an identification code (ID(ll)) recorded in a currently 
connected portable information recording medium (Rll) and an identification code (ID(ll)) 
recorded in itself the client computers , an environment comparing means (11H) that 
compares a network environment indicated by environment information (ENV(ll)) recorded 
in a currently connected portable information recording medium (Rl 1) and a current network 
environment of itself the client computers , an access right setting means (11B) that sets a 
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predetermined access right based on comparison results obtained by said identification code 
comparing means and said environment comparing means , and a server access means (11 A) 
that performs access to the server computer within a range of the access right that has been set 
by said access right setting means . 

10. (Currently Amended) A computer system comprising: a network (100); a server 
computer (110, 120) connected to the network; a plurality of client computers (11, 12, 21) 
connectable to the network; and portable information processing devices (Pll) issued 
respectively to individual users for use upon connection to the client computers; wherein 
a unique identification code (ID(ll), ID(12), ID(21)) is recorded in each of the client 
computers (11, 12, 21) so as to enable distinction from other client computers said 
identification code being not necessary to be sent to the server computer in order to establish 
a session , 

an identification code (ID(ll), ID(12), ID(21)) that corresponds to a specific identification 
code recorded in a specific client computer and environment information (ENV(ll), 
ENV(12), ENV(21)) that indicates a specific network environment that is obtained when a 
client computer (11, 12, 21) is connected to a specific location of the network (100) are 
recorded in each of the portable information processing devices (Pll) issued to the individual 
users , 

each of the client computers (11, 12, 21) comprises an interface means (11D) for 
connecting a portable information processing device (Pll), and a server access means (11 A) 
that performs access to the server computer (110, 120) within a range of an access right that is 
set and transmitted from a currently connected portable information processing device (Pll), 
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and 

each of the portable information processing devices (Pll) comprises an identification 
code comparing means (HE) that compares an identification code (ID(ll)) recorded in a 
currently connected client computer (11) and an identification code (ID(ll)) recorded in itself 
the portable information processing devices , an environment comparing means (111) that 
compares a network environment of the currently connected client computer and a network 
environment indicated by environment information (ENV(ll)) recorded in itself the portable 
information processing devices , an access right setting means (11F) that sets a predetermined 
access right based on comparison results obtained by said identification code comparing 
means and said environment comparing means , and an access right transmitting means (11G) 
that transmits, to the currently connected client computer (11), the access right that has been 
set by said access right setting means . 

1 1 . (Previously Presented) The computer system according to Claim 9, wherein 

the access right setting means (11B, 11F) sets a first access right when the result of 
comparison by the identification code comparing means (11C, HE) indicates matching, sets a 
second access right, with more restrictions than the first access right, when the result of 
comparison by the identification code comparing means (11C, HE) indicates mismatching 
but the result of comparison by the environment comparing means (1 1H, 111) indicates 
matching, and sets a third access right, with even more restrictions than the second access 
right, when neither of the comparison results indicates matching. 
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12. (Previously Presented) The computer system according to Claim 9, wherein 

the access right setting means (11B, 11F) sets a first access right when both the result of 
comparison by the identification code comparing means (11C, HE) and the result of 
comparison by the environment comparing means (11H, 111) indicate matching, sets a second 
access right, with more restrictions than the first access right, when the result of comparison 
by the identification code comparing means (11C, HE) indicates matching but the result of 
comparison by the environment comparing means (11H, 111) indicates mismatching, and sets 
a third access right, with even more restrictions than the second access right, when neither of 
the comparison results indicates matching. 

13. (Currently Amended) An access right setting method for a computer system 
comprising: a network (100); a server computer (110, 120) connected to the network; and a 
plurality of client computers (11, 12, 21) connectable to the network; the method setting an 
access right when each individual user uses a client computer to access the server computer 
and comprising: 

a preparation step, wherein a portable information processing device (Pll), to be used by 
connecting to a client computer (11, 12, 21), is issued to each individual user, and an 
identification code (ID(ll)), corresponding to a unique identification code that is recorded in 
a specific client computer (11) and enables distinction of the specific client computer from 
other client computers, is recorded in the portable information processing device , said 
identification code being not necessary to be sent to the server computer in order to establish 
a session ; and 

an access right setting step, wherein when a user connects a predetermined portable 
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information processing device (Pll), issued to him/herself, to a predetermined client 
computer (11) and performs a login procedure on the predetermined client computer, the 
predetermined client computer (11) or the predetermined portable information processing 
device (Pll) is made carries out a first operation to compare an identification code (ID(1 1)) 
recorded in the predetermined client computer (11) with an identification code (ID(ll)) 
recorded in the predetermined portable information processing device (Pll) and a second 
operation to set a predetermined access right based on a comparison result obtained by the 
first operation ; 

wherein when in the access right setting step, the comparison result indicates 
mismatching, an access right with more restrictions than when the comparison result indicates 
matching is set. 

14. (Currently Amended) An access right setting method for a computer system 
comprising: a network (100); a server computer (110, 120) connected to the network; and a 
plurality of client computers (11, 12, 21) connectable to the network; the method setting an 
access right when each individual user uses a client computer to access the server computer 
and comprising: 

a preparation step, wherein a portable information processing device (Pll), to be used by 
connecting to a client computer (11, 12, 21), is issued to each individual user, and 
environment information (ENV(ll)) that indicates a specific network environment that is 
obtained when a client computer (11) is connected to a specific location of the network (100) 
is recorded in the portable information processing device; and 

an access right setting step, wherein when a user connects a predetermined portable 
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information processing device (Pll), issued to him/herself, to a predetermined client 
computer (11) and performs a login procedure on the predetermined client computer, the 
predetermined client computer (11) or the predetermined portable information processing 
device (Pll) is made carries out a first operation to compare a current network environment 
of the predetermined client computer (11) with a network environment indicated by 
environment information (ENV(ll)) recorded in the predetermined portable information 
processing device (Pll) and a second operation to set a predetermined access right based on a 
comparison result obtained by the first operation ; 

wherein when in the access right setting step, the comparison result indicates 
mismatching, an access right with more restrictions than when the comparison result indicates 
matching is set. 

15. (Currently Amended) An access right setting method for a computer system 
comprising: a network (100); a server computer (110, 120), connected to the network; and a 
plurality of client computers (11, 12, 21) connectable to the network; the method setting an 
access right when each individual user uses a client computer to access the server computer 
and comprising: 

a preparation step, wherein a portable information processing device (Pll), to be used by 
connecting to a client computer (11, 12, 21), is issued to each individual user, and an 
identification code (ID(ll)), corresponding to a unique identification code that is recorded in 
a specific client computer (11) and enables distinction of the specific client computer from 
other client computers, and environment information (ENV(ll)) that indicates a specific 
network environment that is obtained when a client computer (11) is connected to a specific 
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location of the network (100) are recorded in the portable information processing device , said 
identification code being not necessary to be sent to the server computer in order to establish 
a session ; and 

an access right setting step, wherein when a user connects a predetermined portable 
information processing device (Pll), issued to him/herself, to a predetermined client 
computer (11) and performs a login procedure on the predetermined client computer, the 
predetermined client computer (11) or the predetermined portable information processing 
device (Pll) is made carries out a first operation to compare an identification code (ID(ll)) 
recorded in the predetermined client computer (11) with an identification code (ID(ll)) 
recorded in the predetermined portable information processing device (Pll), compare a 
current network environment of the predetermined client computer (11) with a network 
environment indicated by environment information (ENV(ll)) recorded in the predetermined 
portable information processing device (Pll), and a second operation to set a predetermined 
access right based on comparison results obtained by the first operation ; 

wherein in the access right setting step, if an identification code comparison result 
indicates matching, a first access right is set, if the identification code comparison result 
indicates mismatching but a network environment comparison result indicates matching, a 
second access right, with more restrictions than the first access right, is set, and if neither of 
the comparison results indicate matching, a third access right, with even more restrictions 
than the second access right, is set. 

16. (Currently Amended) An access right setting method for a computer system 
comprising: a network (100); a server computer (110, 120), connected to the network; and a 



13 



plurality of client computers (11, 12, 21) connectable to the network; the method setting an 
access right when each individual user uses a client computer to access the server computers 
and comprising: 

a preparation step, wherein a portable information processing device (Pll), to be used by 
connecting to a client computer (11, 12, 21), is issued to each individual user, and an 
identification code (ID(ll)), corresponding to a unique identification code that is recorded in 
a specific client computer (11) and enables distinction of the specific client computer from 
other client computers, and environment information (ENV(ll)) that indicates a specific 
network environment that is obtained when a client computer (11) is connected to a specific 
location of the network (100) are recorded in the portable information processing device , said 
identification code being not necessary to be sent to the server computer in order to establish 
a session ; and 

an access right setting step, wherein when a user connects a predetermined portable 
information processing device (Pll), issued to him/herself, to a predetermined client 
computer (11) and performs a login procedure on the predetermined client computer, the 
predetermined client computer (11) or the predetermined portable information processing 
device (Pll) is made carries out a first operation to compare an identification code (ID(ll)) 
recorded in the predetermined client computer (11) with an identification code (ID(ll)) 
recorded in the predetermined portable information processing device (Pll), compare a 
current network environment of the predetermined client computer (11) with a network 
environment indicated by environment information (ENV(ll)) recorded in the predetermined 
portable information processing device (Pll), a second operation to and set a predetermined 
access right based on comparison results obtained by the first operation ; 
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wherein in the access right setting step, if both an identification code comparison result 
and a network environment comparison result indicate matching, a first access right is set, if 
the identification code comparison result indicates matching but the network environment 
comparison result indicates mismatching, a second access right, with more restrictions than 
the first access right, is set, and if neither of the comparison results indicate matching, a third 
access right, with even more restrictions than the second access right, is set. 

17. (Previously Presented) A program for making a computer function as a client computer 
in the computer system according to Claim 1 or a computer-readable recording medium 
recording the program. 

18. (New) A program for making a computer function as a client computer in the 
computer system according to Claim 2 or a computer-readable recording medium recording 
the program. 

19. (New) A program for making a computer function as a client computer in the 
computer system according to Claim 5 or a computer-readable recording medium recording 
the program. 

20. (New) A program for making a computer function as a client computer in the 
computer system according to Claim 6 or a computer-readable recording medium recording 
the program. 
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21. (New) A program for making a computer function as a client computer in the 
computer system according to Claim 9 or a computer-readable recording medium recording 
the program. 

22. (New) A program for making a computer function as a client computer in the 
computer system according to Claim 10 or a computer-readable recording medium recording 
the program. 

23. (New) The computer system according to Claim 2, wherein 

the access right setting means (11B, 11F) sets a first access right when the comparison 
result indicates matching and sets a second access right, with more restrictions than the first 
access right, when the comparison result indicates mismatching. 

24. (New) The computer system according to Claim 2, wherein 

a MAC address provided to a LAN communication circuit incorporated in a client 
computer (11, 12, 21), unique data stored in a storage device of the client computer (11, 12, 
21), or information indicating an arrangement of application programs stored in a storage 
device of the client computer (11, 12, 21) is used as a unique identification code for 
identifying the client computer (11, 12, 21). 
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25. (New) The computer system according to Claim 6, wherein 

the access right setting means (11B, 11F) sets a first access right when the comparison 
result indicates matching and sets a second access right, with more restrictions than the first 
access right, when the comparison result indicates mismatching. 

26. (New) The computer system according to any one of Claim 6, wherein 

an IP address provided to a client computer (11, 12, 21), a default gateway address set for 
the client computer (11, 12, 21), a proxy server address set for the client computer (11, 12, 
21), or a domain name which can be referred by a DNS server used by the client computer 
(11, 12, 21) is used as environment information that indicates a network environment of the 
client computer (11, 12, 21). 

27. (New) The computer system according to Claim 10, wherein 

the access right setting means (11B, 11F) sets a first access right when the result of 
comparison by the identification code comparing means (11C, HE) indicates matching, sets a 
second access right, with more restrictions than the first access right, when the result of 
comparison by the identification code comparing means (11C, HE) indicates mismatching 
but the result of comparison by the environment comparing means (1 1H, 111) indicates 
matching, and sets a third access right, with even more restrictions than the second access 
right, when neither of the comparison results indicates matching. 
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28. (New) The computer system according to Claim 10, wherein 

the access right setting means (11B, 11F) sets a first access right when both the result of 
comparison by the identification code comparing means (11C, HE) and the result of 
comparison by the environment comparing means (11H, 111) indicate matching, sets a second 
access right, with more restrictions than the first access right, when the result of comparison 
by the identification code comparing means (11C, HE) indicates matching but the result of 
comparison by the environment comparing means (11H, 111) indicates mismatching, and sets 
a third access right, with even more restrictions than the second access right, when neither of 
the comparison results indicates matching. 
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